Page 611 - White Papers - bank information security

Guide to GLBA Risk Management Compliance

This guide focuses on GLBA's digital security requirements as it pertains to network security audits and vulnerability management. GLBA's security regulations are in place to assure the confidentiality and privacy of financial information electronically collected, maintained, used, or transmitted – especially when...

Why Phishing Works

To build systems shielding users from fraudulent (or phishing) websites, designers need to know which attack strategies work and why. This paper provides the first empirical evidence about which malicious strategies are successful at deceiving general users. We first analyzed a large set of captured phishing attacks...

VeriSign Identity Protection for FFIEC Compliance

Learn how to protect your consumers' digital identities. Comply with FFIEC guidelines. Manage your reputational risk. Solidify your approach to consumer authentication. Learn more about VeriSign(r) Identity Protection Services. Get the white paper from VeriSign now!

Embedded Security: Trusted Platform Module Technology Comes of Age

With hundreds of millions of electronic transactions taking place daily, businesses and organizations have a strong incentive to protect the integrity of the data exchanged in this manner, and to positively ensure the identities of those involved in the transactions. This has led to an industry-wide quest for better,...

Sponsored by thawte

The Value of Authentication

One of the biggest problems facing your Internet business today is the thorny issue of trust and security. The vast majority of consumers are concerned about the safety of their credit card and personal details. People simply don't trust the Web, fearing that their transactions might not be safe. Not only are...

Sponsored by thawte

Securing Your Online Data Transfer With SSL

Secure Socket Layer (SSL) is a protocol developed by Netscape in 1996 which quickly became the method of choice for securing data transmissions across the Internet. SSL is an integral part of most web browsers and web servers and makes use of the public-and-private key encryption system developed by RSA. In order...

Sponsored by thawte

Securing Your Apache Web Server With a thawte Digital Certificate

In this guide you will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. We will also touch on the role of...

Sponsored by thawte

The Starter PKI Program

thawte's Starter Public Key Infrastructure (PKI) Program enables companies that require multiple security certificates to better manage their certificate needs without the red tape usually associated with this process. This program will benefit organizations by helping to improve IT and business processes through...

Sponsored by NIST

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography

NIST Special Publication (SP) 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography, is now available . This document specifies key establishment schemes based on standards developed by the Accredited Standards Committee (ASC) X9, Inc.: ANS X9.42 (Agreement of...

Sponsored by NIST

DRAFT FIPS 186-3

Draft FIPS 186-3 is the proposed revision of FIPS 186-2. The draft defines methods for digital signature generation that can be used for the protection of messages, and for the verification and validation of those digital signatures. Three techniques are allowed: DSA, RSA and ECDSA. This draft includes requirements...

Sponsored by NIST

DRAFT Special Publication 800-89

Entities participating in the generation or verification of digital signatures depend on the authenticity of the process. This Recommendation specifies methods for obtaining the assurances necessary for valid digital signatures: assurance of domain parameter validity, assurance of public key validity, assurances...

Sponsored by NIST

NIST Interagency Report (NISTIR) 7290 Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation

The use of mobile handheld devices within the workplace is expanding rapidly. These devices are no longer viewed as coveted gadgets for early technology adopters, but have instead become indispensable tools that offer competitive business advantages for the mobile workforce. While these devices provide productivity...

Sponsored by NIST

Guidelines for Media Sanitization

Information systems capture, process, and store information using a wide variety of media. This information is located not only on the intended storage media but also on devices used to create, process, or transmit this information. This media may require special disposition in order to mitigate the risk of...

Sponsored by NIST

Biometric Data Specification for Personal Identity Verification

The Homeland Security Presidential Directive HSPD-12 called for new standards to be adopted governing the interoperable use of identity credentials to allow physical and logical access to Federal government locations and systems. The Personal Identity Verification (PIV) standard for Federal Employees and Contractors,...

Your Customers and Their Secrets

This paper discusses and analyzes the internet-based, password reset functionality provided by many organizations for their customers. The average application user is being forced to remember more and more complex passwords to accomplish their daily routines. The very nature of complex passwords, sometimes results in...